#!/usr/bin/perl

############################# LEGAL NOTICE ###############################
############ Copyright © Patrick Tan of www.clickitpro.com ###############
# This script contains the proprietary source code of Patrick Tan.       #
# Permission is hereby granted to you solely for the use of this source  #
# code on your specified Web site in its unaltered state.  You are not   #
# allowed to resell this script or modify its source codes. These actions#
# violate international copyright and trade secret laws, and will be     #
# prosecuted to the fullest extent permitted by law, unless permission   #
# is sought from Patrick Tan.                                            #
#                                                                        #
# The use of this script is strictly on your own discretion, without any #
# express or implied warranties. In no event shall www.clickitpro.com,   #
# Patrick Tan or contributors to this script be held liable for any      #
# direct, indirect, incidental or consequential damages (including, but  #
# not limited to, procurement of substitute goods or services; loss of   #
# use, profits or data; or business interruption) arising in any way out #
# of the use of this script based on any theory of liability, whether in #
# the law of contract, strict liability, tort, negligence or otherwise.  #
##########################################################################

#### Set Date & Variables ####

$cgiurl = "http://www.xprodbase.com/adtracker"; 
$homepage = "http://www.xprodbase.com/"; 
$user = "chazzuser"; 
$secure = "dontpanic"; 

($Second, $Minute, $Hour, $DayOfMonth, $Month, $Year, $WeekDay, $DayOfYear, $IsDST) = gmtime(time);
$RealMonth = $Month + 1;
$RealYear = $Year + 1900;   $RY = substr($RealYear, 2, 2);
$date = sprintf("%02d/%02d/%02d", $DayOfMonth, $RealMonth, $RY);

@DAT=();
if ($ENV{"REQUEST_METHOD"} eq 'GET') {
    $input = $ENV{"QUERY_STRING"};
    @DAT = split(/&/, $input);
    $ND=@DAT;
    if ($ND == '3') {
        ($apname, $adid, $code) = @DAT;    
        if ($code eq $secure) {
            if ($adid eq 'report') { $note=0;  $mesg=0;  $id=$apname.'&'.'Campaign_ID';  &report; }
            elsif ($apname eq 'adlist') { &list_ads; }
            else { &intruder_alert; }
        }
        else { &intruder_alert; }
    }
    elsif ($ND == '2') {
        ($apname, $adid) = @DAT;
        $id = $apname.':'.$adid;   &add_hit;
    }
    elsif ($ND == '1') {
        if ($input eq 'login') { $note='0'; &login; }
        else { print "Location: $homepage\n\n"; }
    }
    else { print "Location: $homepage\n\n"; }
}
else {
    read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
    @pairs = ();
    @pairs = split(/&/, $buffer);
    foreach $pair (@pairs) {
        ($name, $value) = split(/=/, $pair);
        # Un-Webify plus signs and %-encoding
        $value =~ s/\+/ /g;
        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
        $value =~ s/#exec cmd/COMMAND NOT ALLOWED/gi;
        $value =~ s/\<!--#/<INCLUDES NOT ALLOWED/g;
        $value =~ s/\<\?/<PHP NOT ALLOWED/gi;  
        $value =~ s/\t/ /g; 
        $value =~ s/<!--(.|\n)*-->//g;
        $value =~ s/<([^>]|\n)*>//g;
        $FORM{$name} = $value;
    }
    $task = $FORM{'task'};
    $code = $FORM{'code'};
    if ($code eq $secure) {
        if ($task eq 'Initiate') {
            $adcode = $FORM{'adcode'};
            $apname = $FORM{'apname'};
            if ($adcode ne '') {
                $id = $apname.':'.$adcode;
                dbmopen(%AD, "MFAtrack", 0600);
                $AD{$id} = join("\t", ($date, $FORM{'url'}, 0));
                dbmclose(%AD);
                $note="Ad campaign $adcode initiated successfully!";  $mesg=0;
                $id =~ s/:/&/g;
            }
            else { $note=0; $mesg=0; $id=$apname.'&'.'Campaign_ID'; } 
            &report;
        }
        elsif ($task eq 'Delete') {
            $apname = $FORM{'apname'};
            $del = $apname.':'.$FORM{'del'};
            dbmopen(%AD, "MFAtrack", 0600);
            delete($AD{$del});
            dbmclose(%AD);
            $id=$apname.'&'.'Campaign_ID';   $mesg="Ad campaign $FORM{'del'} removed successfully!"; $note=0; &report;
        }
        elsif ($task eq 'Create Ad') {
             $ad=$FORM{'adname'};   $ad =~ s/ //g;
             dbmopen(%AP, "CIPAds", 0600);
             $AP{$ad} = join("\t", ($date, $FORM{'product'}, $FORM{'url'}, $FORM{'adcopy'}));
             dbmclose(%AP);
             &list_ads;
        }
        else { &intruder_alert; }
    }
    else { 
        if ($task eq 'Login') {
            if ($FORM{'uid'} eq $user && $FORM{'pass'} eq $secure) { &list_ads }  
            else { $note='Incorrect username or password!';  &login; }
        }
        else { &intruder_alert; }
    }
}

#### Login Page ####

sub add_hit {
    dbmopen(%AD, "MFAtrack", 0600);
    if ($AD{$id}) {
        $rec = $AD{$id};
        ($day, $src, $hit) = split(/\t/, $rec);
        $hit=$hit+1;
        $AD{$id} = join("\t", ($day, $src, $hit));
        &redirect_url;
    }
    else { print "Location: $homepage\n\n"; }
    dbmclose(%AD);
}

sub login {
    &header;
    print "<table width=534 border=0 cellpadding=0 cellspacing=0>\n";
    print "<tr><td><br><br>\n";
    print "    <table border=0 width=534 cellspacing=0 cellpadding=0>\n";
    print "    <tr><td style=\"border:1px solid #6699FF;padding:4px;\">\n";
    print "        <table border=0 width=524 cellspacing=0 cellpadding=0>\n";
    print "        <tr><td><img border=0 width=524 height=91 src=\"images/adtrack.gif\"></td>\n";
    print "        <tr><td height=4></td>\n";
    print "        <tr><td ID=\"bar\">&nbsp; &nbsp; USER LOGIN</td>\n";
    print "        <tr><td style=\"padding:30px;\"><table border=0 cellspacing=0 cellpadding=0>\n";
    if ($note ne '0') { print "                                        <tr><td colspan=2><font color=#FF8A25><B>$note</B></font><br><br></td>\n"; }
    print "                                        <tr><td><B>Username: &nbsp; </B></td><td><input type=text ID=\"data\" name=uid size=15></td>\n";
    print "                                        <tr><td><B>Password: &nbsp; </B></td><td><input type=text ID=\"data\" name=pass size=15> &nbsp; &nbsp; <input type=submit ID=\"data\" name=task value=\"Login\"></td>\n";
    print "                                        </table></td>\n";
    print "        </table></td>\n";
    print "    </table></td>\n";
    &footer;
}

#### List Ads #### 

sub list_ads {
    &header;
    print "<input type=hidden name=code value=$secure>\n";
    print "<table width=534 border=0 cellpadding=0 cellspacing=0>\n";
    print "<tr><td><br><br>\n";
    print "    <table border=0 width=534 cellspacing=0 cellpadding=0>\n";
    print "    <tr><td style=\"border:1px solid #6699FF;padding:4px;\">\n";
    print "        <table border=0 width=524 cellspacing=0 cellpadding=0>\n";
    print "        <tr><td><img border=0 width=524 height=91 src=\"images/adtrack.gif\"></td>\n";
    print "        <tr><td height=4></td>\n";
    print "        <tr><td ID=\"bar\">&nbsp; &nbsp; CREATE NEW AD:</td>\n";
    print "        <tr><td style=\"padding:15px;\">\n";
    print "            <table border=0 width=494 cellspacing=0 cellpadding=0>\n";
    print "            <tr><td><B>Ad Name: </B></td><td><input type=text ID=\"data\" name=adname size=20></td>\n";
    print "            <tr><td><B>Product: </B></td><td><input type=text ID=\"data\" name=product size=60></td>\n";
    print "            <tr><td><B>Location: </B></td><td><input type=text ID=\"data\" name=url size=60></td>\n";
    print "            <tr><td><B>Ad Copy: </B></td><td><textarea ID=\"data\" name=adcopy cols=62 rows=4></textarea></td>\n";
    print "            <tr><td colspan=2 align=right><br><input type=submit ID=\"data\" name=task value=\"Create Ad\"></td>\n";
    print "            </table></td>\n";
    print "        <tr><td ID=\"bar\">&nbsp; &nbsp; EXISTING ADS:</td>\n";
    print "        <tr><td><table border=0 width=524 cellspacing=3 cellpadding=0>\n";
    print "                <tr><th ID=\"bar\">Date</th><th ID=\"bar\">Ad Name</th><th ID=\"bar\">Product</th><th ID=\"bar\">Redirect URL</th>\n";
    dbmopen(%AP, "CIPAds", 0600);
    foreach $adname (sort(keys(%AP))) {
        $rec = $AP{$adname};
        ($day, $product, $goto, $adcopy) = split(/\t/, $rec);
        print "                <tr><td ID=\"cell\" align=center>$day</td><td align=center ID=\"cell\"><a href=\"$cgiurl/track.pl?$adname&report&$secure\">$adname</a></td><td ID=\"cell\" align=center>$product</td><td ID=\"cell\">$goto</td>\n";
    } 
    dbmclose(%AP);
    print "                </table></td>\n";
    print "        <tr><td><br></td>\n";
    print "        </table></td>\n";
    print "    </table></td>\n";
    &footer;
}

#### Redirect URK ####

sub redirect_url {
    dbmopen(%AP, "CIPAds", 0600);
    $rec = $AP{$apname};
    ($day, $product, $goto, $adcopy) = split(/\t/, $rec);
    dbmclose(%AP);
    print "Location: $goto\n\n";
}    

#### Intruder_alert ####

sub intruder_alert {
    print "Content-type: text/html\n";
    print "\n"; 
    print "<html><head>\n";
    print "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-1252\">\n";
    print "<title>Bad Key Alert!</title></head>\n";
    print "<body bgcolor=#FFFFFF link=#ff0000 vlink=#ff0000 text=#000000>\n";
    print "<p align=center>\n";
    print "<table width=440 border=0 cellpadding=0 cellspacing=0>\n";
    print "<tr><td colspan=2><br><br><br></td>\n";
    print "<tr><td width=160 valign=top align=left><img width=134 height=130 src=\"http://www.clickitpro.com/images/badkey.gif\"></td>\n";
    print "    <td width=280><font face=\"Arial\" color=#FF0000 style=\"font-size:12pt;\"><B>THE SYSTEM IS UNABLE TO DECIPHER YOUR KEY ACTION!</B></font><font face=\"Arial\" style=\"color:#000000;font-size:9pt;\"><br><br>If you are a legitimate user, it could be caused by runtime data error in the database. &nbsp; Please <a href=\"mailto:$recipient\">notify the Webmaster</a> of this error. &nbsp; Clicking the <B>Enter</B> key on your keyboard when you are entering data into a form or executing a function may also lead to bad key errors. &nbsp; Please use the relevant button provided on the Web page to carry out these tasks.</font></td>\n";
    print "<tr><td colspan=2 align=center><br><font face=\"Arial\" color=#ff0000 style=\"font-size:36pt;\"><B>BAD KEY ACTION!</B></font></td>\n";
    print "</table></p></body></html>\n";
}

#### Generate Report ####

sub header {
    print "Content-type: text/html\n";
    print "\n"; 
    print "<html><head>\n";
    print "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-1252\">\n";
    print "<title>Ad Tracking Script</title>\n";
    print "<base href=\"http://www.clickitpro.com/portal/\">\n";
    print "<STYLE>\n";
    print "<!--\n";
    print "#main { position:absolute; top:0; left:0; width=770px; }\n";
    print "#bar { font-family:Arial;font-size:9pt;font-weight:bold;color:#FFFFFF;padding:1px;background-color:#6699FF; }\n";
    print "#cell { font-family:Tahoma;font-size:11px;color:#000000;padding-top:1px;padding-bottom:1px;padding-left:5px;padding-right:5px;background-color:#DBEDFF; }\n";
    print "#text { font-family:Verdana; font-size:8pt; }\n";
    print "#data { font-family:Arial;font-size:9pt;color: #000000; }\n";
    print "td { font-family:Arial;font-size:9pt;color: #000000; }\n";
    print "//-->\n";
    print "</STYLE>\n";
    print "</head>\n";
    print "<body bgcolor=\"#ffffff\" link=\"#FF0000\" vlink=\"#FF0000\" text=\"#000000\" topmargin=0 leftmargin=0>\n";
    print "<a name=top></a>\n\n";
    print "<DIV ID=\"main\" align=center>\n";
    print "<FORM method=post action=\"$cgiurl/track.pl\">\n";
}

sub footer {
    print "<tr><td height=6> </td>\n";
    print "<tr><td align=center><font face=\"Verdana\" style=\"font-size:8pt;\">Copyright &copy; $RealYear <a href=\"http://www.clickitpro.com/\" target=\"_blank\">Click-It Pro</a></font></td>\n";
    print "<tr><td><br><br></td>\n";
    print "</table></form>\n";
    print "</DIV>\n\n";
    print "<a name=bottom></a>\n";
    print "</body></html>\n";
}

sub report {
    &header;
    print "<input type=hidden name=apname value=\"$apname\"><input type=hidden name=code value=$secure>\n";
    print "<table width=534 border=0 cellpadding=0 cellspacing=0>\n";
    print "<tr><td><br><br>\n";
    print "    <table border=0 width=534 cellspacing=0 cellpadding=0>\n";
    print "    <tr><td style=\"border:1px solid #6699FF;padding:4px;\">\n";
    print "        <table border=0 width=524 cellspacing=0 cellpadding=0>\n";
    print "        <tr><td width=524 height=91 background=\"images/adtrack.gif\" style=\"padding:8px;\" align=right valign=bottom><input type=button ID=\"data\" value=\"Ad List\" onClick=\"location.replace(\'$cgiurl/track.pl?adlist&1&$secure\')\"></td>\n";
    print "        <tr><td height=4></td>\n";
    print "        <tr><td ID=\"bar\">&nbsp; &nbsp; INITIATE AD CAMPAIGN</td>\n";
    print "        <tr><td style=\"padding:15px;\">\n";
    print "            <table border=0 width=494 cellspacing=0 cellpadding=0>\n";
    dbmopen(%AP, "CIPAds", 0600);
    $rec = $AP{$apname};
    ($day, $product, $goto, $adcopy) = split(/\t/, $rec);
    dbmclose(%AP);
    print "            <tr><td colspan=3 ID=\"text\">You can use this tracking script to track the responses to the following ad. &nbsp; Just remember to insert the following tracking link to your ad. &nbsp; Please replace the <B>Campaign_ID</B> with the corresponding Campaign ID.</td>\n";
    print "            <tr><td><img border=0 width=90 height=15 src=\"images/blnk.gif\"></td>\n";
    print "                <td><img border=0 width=4 height=15 src=\"images/blnk.gif\"></td>\n"; 
    print "                <td><img border=0 width=400 height=15 src=\"images/blnk.gif\"></td>\n";
    print "            <tr><td ID=\"cell\"><B>Product: </B></td><td><td ID=\"cell\">$product</td>\n";
    print "            <tr><td colspan=3 height=3></td>\n";
    print "            <tr><td ID=\"cell\"><B>Redirect URL: </B></td><td><td ID=\"cell\">$goto</td>\n";
    print "            <tr><td colspan=3 height=3></td>\n";
    print "            <tr><td ID=\"cell\"><B>Ad Copy: </td><td><td ID=\"cell\">$adcopy</td>\n";
    print "            <tr><td colspan=3 height=3></td>\n";
    print "            <tr><td ID=\"cell\"><B>Tracking Link: </B></td><td><td ID=\"cell\">$cgiurl/track.pl?$id</td>\n";
    print "            <tr><td colspan=3><br></td>\n";
    if ($note ne '0') { print "            <tr><td colspan=3><font color=#FF0000>$note</font><br><br></td>\n"; }
    print "            <tr><td><B>Campaign ID: </B></td><td><td><input type=text ID=\"data\" name=adcode size=20></td>\n";
    print "            <tr><td><B>Referral URL: </B></td><td><td><input type=text ID=\"data\" name=url size=40> &nbsp; &nbsp; &nbsp; <input type=submit name=task ID=\"data\" value=\"Initiate\"></td>\n";
    print "            </table></td>\n";
    $nad=0;
    dbmopen(%AD, "MFAtrack", 0600);
    foreach $key (sort(keys(%AD))) { if ($key ne '' && $key =~ /$apname/) { $nad=$nad+1; } }
    if ($nad > '0') {
        print "        <tr><td ID=\"bar\">&nbsp; &nbsp; REMOVE AD CAMPAIGN</td>\n";
        if ($mesg ne '0') { print "        <tr><td style=\"padding-top:15px;padding-left:15px;\"><font color=#FF0000>$mesg</font></td>\n"; }
        print "        <tr><td style=\"padding:15px;\"><B>Remove Campaign: &nbsp; </B><select ID=\"data\" name=del>";
        foreach $key (sort(keys(%AD))) { 
            if ($key ne '' && $key =~ /$apname/) { 
                ($apname, $adkey) = split(/:/, $key);
                print "<option value=\"$adkey\">$adkey"; 
            } 
        }
        print "</select> &nbsp; &nbsp; <input type=submit ID=\"data\" name=task value=\"Delete\"></td>\n";
    }
    print "        <tr><td ID=\"bar\">&nbsp; &nbsp; AD RESPONSE REPORT</td>\n";
    print "        <tr><td><table border=0 width=524 cellspacing=3 cellpadding=0>\n";
    print "                <tr><th ID=\"bar\">ID</th><th ID=\"bar\">Date</th><th ID=\"bar\">Referral URL</th><th ID=\"bar\">Hits</th>\n";
    foreach $key (sort(keys(%AD))) {
        if ($key =~ /$apname/) {
            ($apname, $adkey) = split(/:/, $key);
            $rec = $AD{$key};
            ($day, $desc, $hit) = split(/\t/, $rec);
            print "                <tr><td ID=\"cell\" align=center>$adkey</td><td ID=\"cell\" align=center>$day</td><td ID=\"cell\">$desc</td><td align=center ID=\"cell\">$hit</td>\n";
        }
    }
    dbmclose(%AD);
    print "                </table></td>\n";
    print "        <tr><td><br></td>\n";
    print "        </table></td>\n";
    print "    </table></td>\n";
    &footer;
}
  
exit;